zeogold: For non-Spanish speakers who don't know what's going on:
You know Spanish? Cool! I always knew you were Mexican!
It might be that GOG (at least Galaxy) doesn't trigger two-step authentication if you log in from the same IP address as before. Wiping and reinstalling your PC doesn't necessarily affect that.
When using browsers, I think at some point having your cookies cleared out (e.g. in Firefox) would always trigger the two-step verification, but that doesn't seem to be the case anymore. With browsers, I am not even sure what nowadays triggers it. I noticed this the other day:
1. If I logged in using Firefox (on the same PC), no two-step verification even if I logged out and cleared cookies and other stuff befween login sessions.
2. If I changed to another browser (which doesn't have valid cookies already) on that same PC, two-step verification would trigger.
So I don't know... Maybe GOG remembers what IP address AND browser you were using before, and won't trigger two-step verification until either one changes, or something like that?
Yeah, only GOG staff can say for sure, but then I am unsure if they want to reveal such highly classified(?) information.